Custom Nuclei templates for IDOR, SSRF, JWT attacks, WAF bypass detection, and secrets exposure - unrandoms/nuclei-bb-templates

Pentesting DVWA across SQLi, XSS, Command Injection, File Inclusion, File Upload, Brute Force, and CSRF — Low to High difficulty - Mahhyya/DVWA-Web-App-Pentesting

Scoped, rate-limited bug bounty recon tooling in Bash + HackerOne report templates - Ngelcondor/bb-recon-toolkit

A GitHub action that can be used to run vulnerability checks using the 10up WP-CLI Vulnerability Scanner - jazzsequence/action-wordpress-vulnerability-scanner

cve-2026-85706-poc-exploit-gitlab. Contribute to 0xlyvio/cve-2026-85706-poc-exploit-gitlab development by creating an account on GitHub.

Contribute to itsanwar/rust-recaptcha-bypass development by creating an account on GitHub.

Burp Suite extension that passively discovers APIs in Proxy traffic and generates OpenAPI 3.1 specifications and Postman collections. - JonsTech/reverse-api-burp

Python PoC for CVE-2026-33439, an OpenAM pre-authentication RCE via jato.clientSession deserialization - infernosalex/CVE-2026-33439-Python-PoC

Contribute to Kyzerz53/Cross-Site-Scripting-XSS- development by creating an account on GitHub.

Automated suspicious-file analysis with Python, ClamAV, YARA, CAPEv2, Sysmon and Wazuh - anaselkarkouri/poc-malware-control

PhishDrill 是一套零第三方依赖的开源钓鱼演练平台:不用搭 C2、不用买商业平台,一台内网机器(甚至一台笔记本)即可完成「发信 → 埋点 → 去伪 → 归因到人 → 报表交付」的完整钓鱼攻防测试,并提供浏览器管理控制台与实时态势大屏。 - haoliyang/PhishDrill

miniOrange 2FA CVE POC. Contribute to cflowsec/CVE-2026-77770 development by creating an account on GitHub.

零依赖 Node 公网蜜罐 + ECharts 实时攻击地图（跑在 OpenWrt 路由器上）. Contribute to viergauls/honeypot-map development by creating an account on GitHub.

Safe local proof of concept for the Cotonti CommentsWidget PHP object injection vulnerability (CAN-2026-2035973 / CVE-2026-71294). - HarshRajSinghania/cotonti-commentswidget-poc

Contribute to ismailtaha12/web-vulnerability-scanner development by creating an account on GitHub.

A mini vulnerability scanner that identifies common security risks, open ports, weak configurations, and outdated software. - amrutakanherkar2006-spec/Vulnerability-Scanner

收集流氓网站和钓鱼网站的仓库. Contribute to T-PageCode/Phishing-Rogue-Site development by creating an account on GitHub.

智能合约审计：漏洞教学合约 + PoC 攻击 + 审计方法论与报告. Contribute to LeonxLJX/smart-contract-audit development by creating an account on GitHub.

Contribute to vanivamshi/CVE-2013-2028-Exploit development by creating an account on GitHub.

Manual web app penetration test of OWASP Juice Shop using Burp Suite — SQL injection, IDOR, DOM XSS, and access control findings with full writeups. - rijen-maharjan/owasp-juice-shop-security-asses...